Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AYj6PLQPvEYSVXfYqP91sEKwYFk.roa
File: AYj6PLQPvEYSVXfYqP91sEKwYFk.roa (raw, json)
Hash identifier: 1Lx/m2uS03xvlhkvPdB7DCHJFYj4HLDjlpSo4VA7/PE=
Subject key identifier: 01:88:FA:3C:B4:0F:BC:46:12:55:77:D8:A8:FF:75:B0:42:B0:60:59
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019DCE5C9470B838E097DA80199F8BE187B3
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AYj6PLQPvEYSVXfYqP91sEKwYFk.roa
Signing time: Mon 27 Apr 2026 09:54:26 +0000
ROA not before: Mon 27 Apr 2026 09:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149457
IP address blocks: 185.142.29.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
202.71.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:5c:94:70:b8:38:e0:97:da:80:19:9f:8b:e1:87:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 27 09:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0188fa3cb40fbc46125577d8a8ff75b042b06059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:39:e5:aa:dd:de:4e:24:1b:d0:fd:58:5f:
6b:06:bf:ef:b6:6c:59:d6:f5:30:f7:f9:a6:50:4e:
25:f4:0c:88:57:03:00:fa:56:c1:ab:4e:10:4d:f5:
b4:6d:7a:8e:e4:f9:6b:1c:47:50:c2:7b:b3:46:68:
0e:bc:2e:c6:9d:8c:aa:c5:2b:8c:a7:95:d4:8c:50:
bd:76:45:2e:c6:80:fd:02:d1:07:bf:04:05:43:e2:
23:af:00:a5:de:84:c8:dd:af:60:8a:39:80:b2:99:
fb:4b:bc:e7:15:6a:47:1c:5a:b9:67:51:6f:44:e6:
42:68:38:b7:3e:45:3e:54:e4:af:8e:a1:8e:33:5b:
8c:83:e7:31:7e:5c:5b:2a:a2:ac:dd:ad:8c:26:f7:
7a:26:03:b4:b0:fe:25:b9:c3:16:ee:c9:9d:3a:1e:
b7:d5:2b:00:f0:61:6d:bc:3c:c7:cf:9f:d1:a5:bc:
43:32:4a:37:28:ce:a3:63:6f:8a:b1:e2:a8:8b:d4:
12:de:be:d8:0d:11:a1:b3:94:cd:83:05:14:29:69:
58:d7:45:b1:68:fe:72:d5:cc:1c:82:ad:74:0d:d7:
f3:08:ae:37:c4:c0:c9:b5:2f:ab:32:b6:70:46:29:
09:fe:9f:a3:82:20:22:95:e6:28:f4:96:1e:3f:b4:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:88:FA:3C:B4:0F:BC:46:12:55:77:D8:A8:FF:75:B0:42:B0:60:59
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AYj6PLQPvEYSVXfYqP91sEKwYFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.29.0/24
185.233.18.0/24
193.107.218.0/24
202.71.5.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d9:48:bf:bc:b2:30:a6:65:26:b7:7c:fd:6e:7d:16:35:47:
6b:52:da:e7:85:ee:26:2f:47:a2:92:65:4e:a4:f3:b1:e8:c6:
c5:75:79:79:69:37:e4:45:08:f4:09:d2:d9:d2:04:f9:08:ee:
09:6f:08:4c:ef:84:98:69:ca:0a:26:9c:68:ab:4a:c2:15:ed:
99:c5:db:04:dd:10:b8:40:61:02:85:c7:f2:6f:87:ce:42:1f:
eb:25:0e:b2:a5:04:4c:50:bb:96:dd:22:67:af:00:36:97:4d:
74:b3:ab:20:92:99:ac:d7:4c:e4:74:cb:3b:3f:96:b2:6c:aa:
62:e5:a7:52:79:e6:c4:31:c7:c3:f8:23:dd:5c:9b:b2:83:52:
4f:af:4a:2b:bb:df:09:6b:33:71:c6:6d:7e:36:9f:5e:09:89:
f2:c9:54:c3:90:8c:76:08:db:3b:c8:37:23:07:20:5d:d7:ee:
34:10:66:fb:f9:20:8a:70:c7:45:3e:51:99:f8:6c:41:9e:3a:
66:bd:46:f9:28:29:4f:cd:c8:21:67:93:3b:e7:d8:f6:08:8a:
3b:10:8e:38:5c:f2:45:f7:7c:99:7b:60:f4:9d:0d:4c:23:ac:
b3:f7:f5:89:09:f8:6c:22:04:ac:48:89:7c:48:1e:ca:86:d4:
52:6a:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:38 2026 by rpki-client